This one was found just browing “port:23 country:GB” results.
It appears that SD Advanced DVRs don’t always require a username and password to get into them – “SD Advanced Closed IPTV -username“
Yeah. Let’s look at the manuals.
So that’s no username or password by default.
And an ini file with credentials of other devices. Great!
At least the manual doesn’t explicitly recommend you setup portfowarding as well…
It seems it’s not just this line made by Dedicated Micros – Ecosense does it as well. In fact, it’s pretty much every one they seem to make. 459 open DVRs in the UK alone.
VU#276148: Dedicated Micros DVR products use plaintext protocols and require no password by default - Varanoid.com
August 20, 2015 at 7:18pm[…] http://cybergibbons.com/security-2/shodan-searches/interesting-shodan-searches-sd-advanced-dvrs/ […]
VU#276148: Dedicated Micros DVR products use plaintext protocols and require no password by default - cPanel Knowledge
August 20, 2015 at 7:42pm[…] http://cybergibbons.com/security-2/shodan-searches/interesting-shodan-searches-sd-advanced-dvrs/ https://www.shodan.io/search?query=command+line+processor+-username […]